[SR-Users] Recommended openSSL version

[Igor Olhovskiy]

Hello!

Due to I still experience irregular Kamailio 5.4 crashes (like 1/month)
related to SSL (using websockets and SIPS) I'm wondering, could openSSL
upgrade change the situation?
As of now in CentOS 7 I have 1.0.2k version.

Does anyone have experience to fix crash-related to TLS problems with
openSSL upgrade?

Or maye some tuneup of TCP parameters can help here?My current setup is
quite simple:

children=4
enable_tls=yes
tcp_accept_no_cl=yes
tcp_connection_lifetime=600
tcp_max_connections=998976 # 1000000 - 1024, so we're leaving 1k for system
reserve
tls_max_connections=998976

Number of clients ~ 200 constantly connected to websocket.
-- 
Best regards,
Igor
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20220622/5face6bf/attachment.htm>